Phishing SMS claiming Binance.

[Dunamisx]

The is to bring to our notice an update from the official Twitter page of Changpeng Zao (Binance CEO) the warning signal against the new scams and phishing technique used through sending of text messages to users stating that a withdrawal is about to occur on their account and in other to avoid or cancel such, they should click on the link provided, once a user click on such, it extract the users credentials using a malware and steal away the user fund (coins/token).

Changpeng Zhao tweeted on Friday There is a massive Phishing scam via SMS with a link to cancel withdrawals. It leads to a phishing website to harvest your credential as in the screenshot below. NEVER click on links from SMS!
https://bitcoinist.com/binance-ceo-warns-users-of-sms-phishing-scam/amp/

This is to inform users of Binance platform and any other related platform users to be careful on the sites they visit, links they click and never claim any process not initiated by them as such in this case, we are encouraged to be security conscious not to allow any form of deceitful scam maneuver to hunt us, such claims to be the well known and popular exchanges, firms or Organizations in other to lure users, if you can remember the precautionary measures given with the use of fiat banks not to disclose any of your account login credentials to anyone including their staffs, else you go to a bank and make complaints. Same is applicable here with the use of digital currency, if you didn't initiate a change off password, or make any transaction then totally ignore any message claiming it occur.

[1714644758]

1714644758

[1714644758]

1714644758

[sunsilk]

There's already a topic that's made for this on Beginners & Help.

Thread: Old phishing scam on the rise on centralized exchanges

The discussion is continuous there not just about this incident but as well as the whole phishing experience and trick made by these scammers.

[bitmover]

The discussion is continuous there not just about this incident but as well as the whole phishing experience and trick made by these scammers.

nobody should ever click a SMS link.

SMS on those exchanges is basically for receiving 2FA codes.

If you want to visit an exchange website, use your bookmarked link or just type binance.com in the address bar. It is dangerous to use links, because you may be clicking a phising link (which is not owned by the exchange, but a similar webpage made by an attacker)

[Leviathan.007]

I've already seen a lot about this case on Twitter where people are warning about it this can be something new regarding Binance phishing and for some people who didn't see such a thing before they may get trapped but the method of scammer is very much old fashion and that's something people usually know it and anyone whois active on this market saw many articles and warning about this scam method even Binance itself warn any user to do not trust any email/SMS from other people they also provided anti-phishing services where you can create a secret key so you can only trust the messages containing this secret key. However, the text on the quote: "NEVER click on links from SMS!" should be super because not just about Binance but there are many scammers the mass email/SMS these links to thousands of people.

[carlfebz2]

The discussion is continuous there not just about this incident but as well as the whole phishing experience and trick made by these scammers.

nobody should ever click a SMS link.

SMS on those exchanges is basically for receiving 2FA codes.

If you want to visit an exchange website, use your bookmarked link or just type binance.com in the address bar. It is dangerous to use links, because you may be clicking a phising link (which is not owned by the exchange, but a similar webpage made by an attacker)

Its been told all over again and again but people do really ignore these kind of warnings and cautions from experienced ones but still ending up on committing these mistakes which do end up for them to lose

assets.It would really be just part of your common sense to tell out that it is really risky on clicking up random links specially if its really in relation to exchange accounts or something.

If you do just mind off about security then you wouldnt really be falling into these traps so easily thats why i do blame out those people who do really easily believe
on such scenario or circumstances.

[Tellek Garing]

Thank you for alerting us about this phishing SMS from hackers, Binance is the world largest cryptocurrency exchange and as it will attract many hackers trying to steal and hack into individual accounts, we all need to be careful, not to click any link sent to your inbox this is an old trick and a lot of reports have come in this respect in the past few months.
Be at alert and confirm from binance support on your app or through the website if you receive any of such emails or SMS before taking any action.

[Coin_trader]

Thank you for alerting us about this phishing SMS from hackers, Binance is the world largest cryptocurrency exchange and as it will attract many hackers trying to steal and hack into individual accounts, we all need to be careful, not to click any link sent to your inbox this is an old trick and a lot of reports have come in this respect in the past few months.
Be at alert and confirm from binance support on your app or through the website if you receive any of such emails or SMS before taking any action.

But how the heck hacker have access on Binance database to get user SMS number? I don't receive those malicious text Binance because my automatically detects and block a message if it comes from an unknown source and contain links. I'm not aware with this because I'm not following CZ anymore on twitter but my concern is why binance continuosly leaking user information while they are the top exchange currently in crypto. This is very risky for newbie that didn't know much about this kind of scheme. Honestly if I was a newbie and receive this kind of alert, I might click the link because I trust binance and I know that I register my sms to there website during my KYC so alerting me via PM is understandable as the fastes way to reach me,

[davis196]

Binance continuosly leaking user information while they are the top exchange currently in crypto

Facebook and Google are the biggest tech companies in the world,but they have suffered from private information leakage multiple times.
The bigger a company is,the more attention it gets from the hackers and scammers.This is a never ending battle and sometimes,such big companies lose this battle.
The scammers are switching from email scams to SMS scams,because it's easier for the email scams to get flagged as spam/scam and the click through rate is lower,because many people are aware about scam emails.
Like other forum members have mentioned,there's no reason for a legit company to send links inside a text message.

[Reid]

Never ever click any button that has a link either in e-mail form, chat or even text messages. I have learned that lesson years ago but I am sure this scumbags are still doing it because I can still receive mails and text messages. You put them on spam or blacklist them, there will still be a new one.
The root of this problem are those people who sell information in the black market.
What can you do to avoid it? Never ever put information in your social media profile, anywhere. If there is a choice of hiding your phone number then do it as early as you can, the same goes with email addresses.

[pinggoki]

People still don't learn eh? This kind of scheme has been a thing for a long time already and people still fall for it? I don't think that it's a secret to not click any suspicious links because that's how many phishing scams do their modus operandi so how come people are still falling for it, it's kind of funny in a way and frustrating at the same time because people fall for it and scammers make money out of an old scheme.

[AicecreaME]

Because Binance is a famous and large platform, it is really eyed by the scammers and hackers. Most of them are just waiting for the perfect timing to attack and have a victim. This kind of trick which is done via SMS is actually an old-fashioned one that has been used years ago already and therefore, people should have known better. Unfortunately though, not everyone is aware about this and still falls victim in this kind of scheme. Mostly scammers lure their victims via phishing texts that offer nice set of package in exchange of something. Sometimes they lure their victims by texts that says they have to change password because it has been compromised and the changing of their passwords are mandatory. Some still fall for these traps and sadly, they won't be able to get their money or assets back because it is a human error.

As an account holder, it is our responsibility to be well-aware of all the possible ways we can be tricked when it comes to money. Because the company isn't really liable with the losses of such scamming and phishing that are not from the inside of their company (inside job tactics). Let's do our best to research first and think before clicking for the safety of our funds. Do not click suspicious email and texts. Disregard those if you know it to yourself that your account is secured and you don't have to suddenly change password. Let's not be gullible and let's protect our assets because no one else will.

[Flexystar]

Actually not only this but the crypto space is bursted with whole new kinda scams all the time. Things are so worst that the phishing can also come from small games to video links on your smartphone and you would never know about it. I have seen incidences where normal gaming apps were able to mine crypto on your phones without you knowing about it.

I’m so surprised that these guys can literally get access to your devices over internet sitting thousands of miles away and you would never know until such alarming.m notices come over social network.

Unfortunately many of them loose confidential info and monetary stuff by the time we come to know about it.

Too horrifying. The more it is giving freedom the more it wants to take back.

[Fortify]

The is to bring to our notice an update from the official Twitter page of Changpeng Zao (Binance CEO) the warning signal against the new scams and phishing technique used through sending of text messages to users stating that a withdrawal is about to occur on their account and in other to avoid or cancel such, they should click on the link provided, once a user click on such, it extract the users credentials using a malware and steal away the user fund (coins/token).

Changpeng Zhao tweeted on Friday There is a massive Phishing scam via SMS with a link to cancel withdrawals. It leads to a phishing website to harvest your credential as in the screenshot below. NEVER click on links from SMS!
https://bitcoinist.com/binance-ceo-warns-users-of-sms-phishing-scam/amp/

This is to inform users of Binance platform and any other related platform users to be careful on the sites they visit, links they click and never claim any process not initiated by them as such in this case, we are encouraged to be security conscious not to allow any form of deceitful scam maneuver to hunt us, such claims to be the well known and popular exchanges, firms or Organizations in other to lure users, if you can remember the precautionary measures given with the use of fiat banks not to disclose any of your account login credentials to anyone including their staffs, else you go to a bank and make complaints. Same is applicable here with the use of digital currency, if you didn't initiate a change off password, or make any transaction then totally ignore any message claiming it occur.

While it is definitely a great reminder about the prevalence of simple and advanced attacks against cryptocurrency holders, this kind of scam is certainly far from a new development. Traditionally these sort of SMS scammers have targeted people for bank accounts, but maybe they're testing the water and hoping to net a few Bitcoin owners. Nobody should trust any phone calls or text messages they get, always go directly to the site (without following any embedded links) to verify any claims. Many people rely on 2FA these days, so you need to make sure to think about and protect your phone at all times, because it could spell ruin if you download the wrong software.

[sunsilk]

The discussion is continuous there not just about this incident but as well as the whole phishing experience and trick made by these scammers.

nobody should ever click a SMS link.

SMS on those exchanges is basically for receiving 2FA codes.

If you want to visit an exchange website, use your bookmarked link or just type binance.com in the address bar. It is dangerous to use links, because you may be clicking a phising link (which is not owned by the exchange, but a similar webpage made by an attacker)

I agree, as long as you did nothing. There's no need for us to fall for those baits and phishing links that are sent to us.

Avoid using the search engines when searching binance. It is the tricky part that many are falling for, they search it through there and then the ads will show and just put a text that they're binance.

A newbie is likely to fall and will even click that even it's not the actual link for the exchange.

[adzino]

The is to bring to our notice an update from the official Twitter page of Changpeng Zao (Binance CEO) the warning signal against the new scams and phishing technique used through sending of text messages to users stating that a withdrawal is about to occur on their account and in other to avoid or cancel such, they should click on the link provided, once a user click on such, it extract the users credentials using a malware and steal away the user fund (coins/token).

Changpeng Zhao tweeted on Friday There is a massive Phishing scam via SMS with a link to cancel withdrawals. It leads to a phishing website to harvest your credential as in the screenshot below. NEVER click on links from SMS!
https://bitcoinist.com/binance-ceo-warns-users-of-sms-phishing-scam/amp/

This is to inform users of Binance platform and any other related platform users to be careful on the sites they visit, links they click and never claim any process not initiated by them as such in this case, we are encouraged to be security conscious not to allow any form of deceitful scam maneuver to hunt us, such claims to be the well known and popular exchanges, firms or Organizations in other to lure users, if you can remember the precautionary measures given with the use of fiat banks not to disclose any of your account login credentials to anyone including their staffs, else you go to a bank and make complaints. Same is applicable here with the use of digital currency, if you didn't initiate a change off password, or make any transaction then totally ignore any message claiming it occur.

More reason why you should be very careful when using a centralized exchange. How do the scammers know that this user uses Binance? Data leak?
Anyway, these kind of scams are almost everywhere. It would be stupid for someone to click a link on a random SMS they received from Binance. If they are a Binance user, they should know that Binance or any exchange never sends any text message on their phone to confirm or cancel withdrawal.

[examplens]

I suggest everyone pass a phishing quiz like this https://phishingquiz.withgoogle.com/?hl=en-GB
It's not about a high score, more is to learn how to recognise fake mail and how phishing email is most easily recognized.
sometimes a warning from Binance will not be seen in time or some other service, it doesn’t have to be Binance.

If you want to visit an exchange website, use your bookmarked link or just type binance.com in the address bar.

a typing error can very easily occur. Scammers already registered and potential typo mistake variation. bookmark is probably the best solution.

[24Kt]

I suggest everyone pass a phishing quiz like this https://phishingquiz.withgoogle.com/?hl=en-GB
It's not about a high score, more is to learn how to recognise fake mail and how phishing email is most easily recognized.
sometimes a warning from Binance will not be seen in time or some other service, it doesn’t have to be Binance.

If you want to visit an exchange website, use your bookmarked link or just type binance.com in the address bar.

a typing error can very easily occur. Scammers already registered and potential typo mistake variation. bookmark is probably the best solution.

And if you found any phishing site, you can always report it to google - https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

You may save some people from falling to a trap by doing this simple initiative. Scammers will always find a way how to screw naive users. Just by merely changing one letter in the domain name can get some unknowingly users.

The below blog article from binance enumerated some example of binance phishing sites -

https://www.binance.com/en/support/faq/360020550592

[Hamphser]

I suggest everyone pass a phishing quiz like this https://phishingquiz.withgoogle.com/?hl=en-GB
It's not about a high score, more is to learn how to recognise fake mail and how phishing email is most easily recognized.
sometimes a warning from Binance will not be seen in time or some other service, it doesn’t have to be Binance.

If you want to visit an exchange website, use your bookmarked link or just type binance.com in the address bar.

a typing error can very easily occur. Scammers already registered and potential typo mistake variation. bookmark is probably the best solution.

And if you found any phishing site, you can always report it to google - https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

You may save some people from falling to a trap by doing this simple initiative. Scammers will always find a way how to screw naive users. Just by merely changing one letter in the domain name can get some unknowingly users.

The below blog article from binance enumerated some example of binance phishing sites -

https://www.binance.com/en/support/faq/360020550592

I do actually do such steps too whenever i do see some phishing site links which do mostly go first on search results which i do immediately report it and at least you had done at least on those sites to disappear.

It is true that people should really be having that kind of initiative when it comes to this even though its a simple step but it could really save up lots of people who might really fall into these classic
way of scamming people.
never ever tend to click links rather than on valid email sources which research would be always be the key.